Buffer Overflow in Linux Kernel's Wifi p54 Driver

CVE-2026-64571

What is CVE-2026-64571?

A vulnerability exists in the Linux kernel's p54 wifi driver where the p54_rx_eeprom_readback() function fails to validate the length of received frames. This oversight can allow a malicious USB device to send a truncated frame, leading to a buffer overflow. The consequence is potential unauthorized access to sensitive kernel memory, with adjacent heap memory being leaked. Proper validation is essential to mitigate this issue and safeguard the integrity of the Linux kernel's network stack.

References